Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/44cc260a-4c2e-3dd3-a524-80a341bad37c.roa
File:                     44cc260a-4c2e-3dd3-a524-80a341bad37c.roa (raw, json)
Hash identifier:          E+LO5y3xCh5sDgJ0EmBdPy3IDU4VVs5T65drBd5lWyE=
Subject key identifier:   B8:60:51:86:7D:79:BB:58:CD:13:17:16:F6:96:57:B3:6F:FF:E7:90
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F4328584F3B7D222462CB7F0B1F867000
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/44cc260a-4c2e-3dd3-a524-80a341bad37c.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     11064
IP address blocks:        74.214.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:22:24:62:cb:7f:0b:1f:86:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=c7f7c55d-5f21-4481-83ae-ec40b2868a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:5a:11:62:e2:5c:05:02:1d:2c:30:42:e3:
                    59:ea:c3:be:d2:dd:f0:63:c4:7a:04:e6:95:19:e7:
                    b5:c3:71:0b:ce:3c:e1:7b:1e:c0:76:02:d4:a5:aa:
                    ad:19:d6:5e:8f:3f:59:99:29:be:4f:bb:6f:fe:94:
                    46:4b:b1:72:99:f0:79:05:c6:7d:8e:6a:59:11:59:
                    ea:07:37:8f:05:d7:85:d9:c9:f9:3c:1a:f7:b8:01:
                    75:d4:6e:9e:04:42:01:4a:2a:18:1c:e4:53:c1:13:
                    c4:dc:c2:ba:dc:00:2b:42:8a:a8:28:50:ff:f0:cb:
                    f9:e0:73:8f:3f:fd:82:03:ac:85:ed:d2:ae:93:01:
                    82:23:55:9f:91:ce:bb:73:3d:fe:69:89:4a:f3:bf:
                    98:36:7e:0a:f2:c9:e5:e3:cf:a6:d0:4a:df:1e:48:
                    fb:8b:e1:28:54:d1:56:fd:57:75:58:fc:5e:fd:39:
                    82:e6:02:fe:96:bd:cf:2f:34:03:ec:7f:bc:6e:0b:
                    5e:ee:5e:45:db:ee:49:e1:3f:19:ee:07:d8:54:04:
                    39:ef:68:db:40:fc:ce:4f:ea:2f:c2:3d:5f:46:ea:
                    ab:40:55:da:ea:99:65:fa:ee:2b:63:be:5c:84:f1:
                    cb:13:19:20:94:22:1f:0a:d6:f9:9b:8a:da:97:8e:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:51:86:7D:79:BB:58:CD:13:17:16:F6:96:57:B3:6F:FF:E7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/44cc260a-4c2e-3dd3-a524-80a341bad37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:91:ba:37:cd:e2:9c:5c:4f:6e:5a:c3:0d:df:4c:d2:af:
         28:85:2f:b2:40:f7:01:0a:da:00:80:35:ea:9a:5c:bc:f3:bb:
         ac:cc:af:bd:7b:73:95:5a:cb:ef:e0:7f:0c:22:a1:19:86:2b:
         79:58:e0:82:c1:72:e3:4e:cb:29:c7:e9:e3:4b:e3:c8:6f:c8:
         9f:05:38:8d:33:80:4b:c8:c4:10:9e:03:0c:7a:f5:04:0b:cd:
         f3:5e:20:4d:07:d9:38:4f:69:d7:8a:61:7f:99:47:e8:8d:b6:
         3b:f8:b4:a8:4e:38:e1:8b:73:5e:90:48:fc:d7:ff:14:cb:d1:
         17:b8:74:89:e1:b7:bf:dc:4f:de:ae:54:5f:23:23:c4:9a:4e:
         c4:c9:71:18:8b:a6:d9:fd:a8:de:e3:84:f1:11:50:1f:5b:44:
         be:8e:2d:c7:75:62:69:15:ba:a7:96:e6:bc:63:99:88:cc:ba:
         f7:cf:88:55:dc:13:65:52:91:a8:99:99:a9:43:f8:3d:8b:fa:
         8b:7e:c3:93:e7:6a:ba:aa:76:6d:e1:25:2a:c4:90:d6:d0:d9:
         1e:5e:70:58:d9:02:92:c8:58:0c:a2:41:8f:1b:4d:15:00:dd:
         be:d0:aa:e7:32:ec:aa:97:08:b2:23:27:c5:89:22:b4:ac:c8:
         48:39:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:38:10 2026 by rpki-client